LISTING OF CLAIMS 



1. (currently amended) A proxy server for relaying 
communications between applications and for performing an 
additional process comprising: 

a key manager for managing multiple keys used to 
generate a digital signature to be provided for a message 
document that is exchanged between said applications; 

a signature key determiner for extracting said message 
document from a predetermined application, and for, based on 
the contents of said message document, determining a key 
used to provide a digital signature , wherein said contents 
do not include any digital signature data ; and 

a signature generator for providing a digital signature 
for said message document by using said key that is obtained 
from said key manager based on a determination made by said 
signature key determiner, and for transmitting said message 
document with said digital signature to a destination 
application. 

2. (original) The proxy server according to claim 1, 
wherein said key manager sets multiple key selection rules 
for obtaining said key, and only when said key selection 
rules are satisfied can said signature generator obtain said 
key. 

3. (original) The proxy server according to claim 2, 
wherein, when said key for generating a digital signature 
for said message document can not be obtained, said 
signature generator employs a replacement key that is 
defined in advance to provide a digital signature. 
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4. (original) A proxy server according to claim 3, 
wherein, after said signature generator has provided a 
digital signature using said replacement key, when said 
acquisition condition that is determined for the original 
key based on said message document is satisfied to enable 
the acquisition of said original key, said signature 
generator again provides a digital signature using said 
original key. 

5. (original) The proxy server according to claim 1, 
further comprising: 

a log manager for storing said message document with a 
digital signature provided by said signature generator, and 
for managing a log. 

6. (original) The proxy server according to claim 4, 
wherein said log manager stores not only said message 
document for which said signature generator has provided a 
digital signature using said replacement key, but also said 
message document without digital signature; and wherein said 
signature generator obtains, from said log manager, said 
message document without said digital signature, and 
provides a digital signature using said original key. 

7. (currently amended) A digital signature system 
comprising: 

applications for performing data processing; and 
a proxy server connected to said applications via a 
network, 

wherein said proxy server intercepts a communication, 
transmitted through said network, from one of said a** 
application applications to an external destination device, 



JP920000300US1 



-3- 



provides a digital signature for a message document 
exchanged via said communication based on the contents of 
said message document/ wherein said contents do not include 
any digital signature data , and transmits said message 
document with said digital signature to said external 
destination device* 

8. (original) The digital signature system according to 
claim 7, wherein said proxy server permits a key used to 
provide a digital signature to be changed in accordance with 
the contents of a message document; and wherein said proxy 
server sets key selection rules for said key and permits 
digital signature using said key when said key selection 
rules have been satisfied. 

9. (original) The digital signature system according 
to claim 8, wherein , when said key selection rules for said 
key used to provide a digital signature for said message 
document have not been satisfied, said proxy server employs 
a predetermined replacement key to provide a digital 
signature; and wherein, when said key selection rules for 
said key are satisfied after said digital signature has been 
provided using said replacement key, said proxy server again 
employs said key to provide a digital signature for said 
message document. 

10. (currently amended) A digital signature 
verification system comprising: 

applications for performing data processing; and 
a proxy server connected to said applications via a 
network, 
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wherein said proxy server intercepts a communication 
from an external destination device to an application 
transmitted through said network, obtains a public key for 
verifying a message document exchanged via said 
communication based on the content of the message document/ 
wherein said contents do not include any digital signature 
data, verifies a digital signature provided for [[a]] the 
message document exchanged via said communication using said 
public key to determine if the message document has been 
authorized , and transmits said message document that has 
been authorized. 

11. (currently amended) A network system comprising: 
multiple groups connected to a wide area network, all 
of which have applications for performing data processing 
and proxy servers connected to said applications via a local 
area network, 

wherein each of said proxy servers oerver intercepts a 
communication transmitted by an application of a local group 
to an application of a different group, provides a digital 
signature for a message document exchanged via said 
communication based on the contents of said message 
document/ wherein said contents do not include any digital 
signature data , and transmits said message document with 
said digital signature to said application of said different 
group; and 

wherein said proxy server intercepts a communication 
from said application to said different group to said 
application of said local group, selects a public key for 
verifying a message document exchanged via said 
communication, wherein said public key is selected based on 
the contents of the message document, wherein said contents 
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do not include any digital signature data# verifies a 
digital signature provided for [[a]] the message document 
exchanged via said communication using said public key to 
determine if the message document has been authorized / and 
transmits said authorized message document to said 
application of said local group. 

12. (original) The network system according to claim 

11, wherein, when said application of said local group 
transmits a message document, said proxy server stores the 
message document with a digital signature in a log, and 
manages said log; wherein, when said application of said 
local group receives a message document from a different 
group, said proxy server stores in a log a message document 
authenticated by a verification of a digital signature, and 
manages said log; and wherein, at a predetermined timing, 
said proxy server compares the transmission log with the 
reception log for the same message document, and authorizes 
communication . 

13. (original) The network system according to claim 

12, wherein said proxy server compares signature information 
for a digital signature concerning the same message 
document . 

14. (original) The network system according to claim 
12, wherein said proxy server compares hash values used for 
providing a digital signature for the same message document. 

15. (currently amended) A computer-implemented digital 
signature method comprioing; for providing a digital 
signature for a message document exchanged by applications 
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and for authorizing said message document, comprising 
including the steps of: 

selecting, in accordance with the type contents of a 
message document generated tranomittcd by one of said 
applications -a — predetermined — application , a key used for 
providing a digital signature for said message document^ 
wherein said contents do not include any digital signature 
data ; 

providing a digital signature for said message 
documentT — when key oclcction rulco get for oaid key are not 
cotabliohed, — fey — uoing — a — replacement — key — that — is — set — 
advance for oaid key ; and 

transmitting said message document with said digital 
signature to a destination designated by said one of said 
applications application; and 

uoing oaid key/ — when oaid key ooloction rulco — for oaid 
key have — been — oatiof ied — after — oaid — digital — signature — has- 
been provided uoing oaid replacement key/ — to again provide a 
digital — oignature, — -aftd — tranomitting — oaid — mcooagc — document 
with oaid digital oignaturc to oaid dcotination . 

16. (currently amended) A computer-implemented digital 
signature verification method comprising: for verifying a 
digital signature provided for a message document exchanged 
by applications, and for authorizing said message document, 
including the steps of: 

accepting a message document with a digital signature 
that uses a replacement key, when said digital signature on 
said received message document has been provided by using 
said replacement key for an original key that is determined 
in accordance with the type of said message document; 
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receiving a message document, after said message 
document signed using said replacement key has been 
accepted, with a digital signature that used said original 
key; ef*4 

selecting a public key for verifying a digital 
signature, provided using said original key, said public key 
being selected based on the contents of the message 
document, wherein said contents do not include any digital 
signature data; and 

verifying said digital signature provided using said 
original key to authorize said message document with said 
digital signature that uses said replacement key. 

17. (currently amended) A storage medium on which input 
means of a computer stores a computer-readable program that 
permits said computer to function as: 

a key manager for managing multiple keys used to 
generate a digital signature to be provided for a message 
document that is exchanged between said applications; 

a signature key determiner for extracting said message 
document from a predetermined application, and for, based on 
the contents of said message document, determining a key 
used to provide a digital signature / wherein said contents 
do not include any digital signature . data ; and 

a signature generator for providing a digital signature 
for said message document by using said key that is obtained 
from said key manager based on a determination made by said 
signature key determiner, and for transmitting said message 
document with said digital signature to a destination 
application. 
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18. (currently amended) A storage medium on which input 
means of a computer stores a computer-readable program that 
permits said computer to perform: 

a process for selecting a key used to provide a digital 
signature for a message document in accordance with the 
contents -a — type of message document transmitted from a 
predetermined applicatio n, wherein said contents do not 
include any digital signature data ; 

a process for providing a digital signature for said 
message document using said key that is selected, and for 
employing a predetermined replacement key to provide said 
digital signature for said message document/ when key 
selection rules for said key used to provide a digital 
signature for said message document have not been satisfied; 
and 

a process for employing said key to provide again a 
digital signature for said message document, when said key 
selection rules for said key are satisfied after said 
digital signature has been provided using said replacement 
key. 

19. (currently amended) A program transmission 
apparatus comprising: 

storage means for storing a program that permits a computer 

to function as: 

key management means for managing a key used to 
generate a digital signature to be provided for a 
message document that is exchanged between said 
applications; 
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signature key determination means for extracting 
said message document from a predetermined application, 
and for determining a key used to provide a digital 
signature based on the contents of said message 
document , wherein said contents do not include any 
digital signature data ; and 

signature generation means for providing a digital 
signature for said message document by using said key 
that is obtained from said key management means based 
on a determination made by said signature key 
determination means; and 

transmission means for reading said program from said 
storage means, and for transmitting said program. 

20. (currently amended) A program transmission 
apparatus comprising: 

storage means for storing a program that permits a 
computer to perform: 

a process for selecting a key used to provide a digital 
signature for a message document in accordance with the 
contents e — typo of message document transmitted from a 
predetermined application , wherein said contents do not 
include any digital signature data ; 

a process for providing a digital signature for said 
message document using said key that is selected, and for 
employing a predetermined replacement key to provide said 
digital signature for said message document when key 
selection rules for said key used to provide a digital 
signature for said message document have not been satisfied; 
and 
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a process for, when said key selection rules for said 
key are satisfied after said digital signature has been 
provided using said replacement key, employing said key to 
provide again a digital signature for said message document; 
and 

transmission means for reading said program from said 
storage means, and for transmitting said program. 

21. (original) A computer program product comprising a 
computer usable medium having computer readable program code 
means embodied thereon for causing relaying communications 
between applications and performing an additional process, 
that computer readable program code means in said computer 
program product comprising computer readable program code 
means for causing a computer to effect the functions of 
claim 1 . 

22. (original) A computer program product comprising a 
computer usable medium having computer readable program code 
means embodied therein for causing a digital signature 
system, the computer readable program code means in said 
computer program product comprising computer readable 
program code means for causing a computer to effect the 
functions of claim 7. 

23. (original) A computer program product comprising a 
computer usable medium having computer readable program code 
means embodied therein for a digital signature verification 
system, the computer readable program code means in said 
computer program product comprising computer readable 
program code means for causing a computer to effect the 
functions of claim 10. 



JP920000300US1 



-11- 



24. (original) A computer program product comprising a 
computer usable medium having computer readable program code 
means embodied therein for a network system, the computer 
readable program code means in said computer program product 
comprising computer readable program code means for causing 
a computer to effect the functions of claim 11. 

25. (original) An article of manufacture comprising a 
computer usable medium having computer readable program code 
means embodied therein for causing a digital signature 
method, the computer readable program code means in said 
article of manufacture comprising computer readable program 
code means for causing a computer to effect the steps of 
claim 15. 

26. (original) An article of manufacture comprising a 
computer usable medium having computer readable program code 
means embodied therein for causing a digital signature 
verification method, the computer readable program code 
means in said computer program product comprising computer 
readable program code means for causing a computer to effect 
the steps of claim 16. 

27. (original) A program storage device readable by 
machine, tangibly embodying a program of instructions 
executable by the machine to perform method steps for a 
digital signature method, said method steps comprising the 
steps of claim 15. 

28. (original) A program storage device readable by 
machine, tangibly embodying a program of instructions 
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executable by the machine to perform method steps for a 
digital signature verification method, said method steps 
comprising the steps of claim 16. 

29. (new) The digital signature method of claim 15 
wherein key selection rules are provided for said key and 
further comprising the steps of: 

providing a digital signature for said message 
document, when key selection rules set for said key are not 
established, by using a replacement key that is set in 
advance for said key; 

using said key, when said key selection rules for said 
key have been satisfied after said digital signature has 
been provided using said replacement key, to again provide a 
digital signature; and 

transmitting said message document with said digital 
signature to said destination. 
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